The problem is that to be able to do OTA updates, you have to have the control system hooked up to the internet in some capacity. The only way to avoid this is to airgap the 2 and make the user plug in a patch cord to update. Of course that runs into the issue of interfering with their fleet telemetry and background 'alpha test static verification'

Several articles from different sources were submitted but no a single one went above 10 points.